← Grabitor

Privacy Policy

Last updated October 11, 2026

This policy explains what Grabitor ("we") collects when you use Grabitor, why, and the choices you have.

What we collect

• Account details: your email, name, password (stored only as a secure hash), and the brand details you enter.
• Your content: photos, videos, music, logos and text you upload or create, and the captions and schedules you set.
• Connected accounts: when you connect a social platform, we store the access tokens that platform gives us so we can post for you. We never see your passwords for those platforms.
• Usage and technical data: basic logs such as IP address, browser, errors and feature use, to keep the service secure and working.
• Feedback: anything you send us through the Feedback button.
• Billing: your plan, credit balance and usage counts. Card details are entered on Stripe's secure page and never reach our servers; we keep only a Stripe customer reference.

How we use it

• To provide Grabitor: editing, generating, storing and publishing your content when you ask us to.
• To keep accounts secure, prevent abuse, fix problems and improve the product.
• To email you about your account (for example, password resets). We don't sell your personal information.

Service providers

We use trusted providers to run Grabitor, such as hosting, email delivery, payments (Stripe), and AI providers that process the text, images, audio or video you send to AI features (for example captions, image or video generation). They process data only to provide those services to us. When you post, your content is sent to the platforms you choose, under their own privacy policies.

YouTube and Google

Grabitor uses YouTube API Services. When you connect a YouTube channel, you sign in with Google and choose to give Grabitor two permissions:

• See your YouTube account (youtube.readonly): we read your channel's name and ID once, so we can show you which channel is connected.
• Upload videos (youtube.upload): we upload the videos you choose to post, with the title, description and privacy setting you set, only when you tap Post or when a post you scheduled is due.

We store the channel name and ID, the access and refresh tokens Google gives us, and the link to each video we upload for you. We don't read, change or delete your other videos, comments, subscribers or analytics. We don't sell this data, share it with anyone else, use it for advertising, or use it to train AI models.

Who we share, transfer or disclose Google user data to

Google user data means the YouTube channel name and ID, the access and refresh tokens, and the links to videos uploaded through Grabitor. We share, transfer or disclose it only in these cases:

• Google (YouTube) itself: when you tap Post, or a post you scheduled is due, we send your video, title, description and privacy setting to YouTube using your tokens, so YouTube can publish it on your channel.
• Our hosting provider: Hostinger International Ltd. runs the server where Grabitor stores this data. It processes the data only on our behalf and under our instructions, and may not use it for anything else.
• When the law requires it: if a valid legal process (such as a court order) requires us to disclose it, and only the part that is required.
• If Grabitor is sold or merged: the data may be transferred to the new owner as part of the business, who must keep following this policy. We will tell you first, and you can delete your data before it moves.

We do not share, sell, transfer or disclose Google user data to anyone else: not to advertisers, data brokers or other apps, and not to the AI providers Grabitor uses. Google user data is never used for advertising and never used to train AI models. No person at Grabitor reads it, except when you ask us for help with your account, when it is needed for security or to follow the law.

Grabitor's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. Google's own handling of your data is described in the Google Privacy Policy.

To stop Grabitor's access, disconnect YouTube in Me → Connected accounts (this deletes the tokens and channel details from Grabitor at once), or remove Grabitor on your Google Account third-party connections page. To delete everything, see Delete your data.

TikTok

When you connect TikTok, we read your TikTok display name, avatar and account ID (user.info.basic) to show which account is connected, and we send the videos you choose to your TikTok inbox (video.upload), where you edit and publish them yourself in the TikTok app. We store the account details and tokens TikTok gives us until you disconnect.

How long we keep it

We keep your content while your account is active. If you try Grabitor without an account, what you upload and make is stored like any other content and is deleted automatically after about 7 days unless you create an account, in which case it moves into that account. You can also delete it at once from Settings. Temporary processing files are deleted within about a day. When you delete your account, we delete your content and account data from our systems, apart from limited records we must keep by law; backups roll off within 30 days.

Your choices and rights

• Download your data: Me → Account & security → Download my data.
• Delete your account: Me → Account & security → Delete account.
• Disconnect platforms at any time in Me → Connected accounts.
• Step-by-step instructions, including for data from Facebook and Instagram: Delete your data.
• Depending on where you live, you may have further rights (such as access, correction or objection). Contact us to use them.

Children

Grabitor is not intended for children under 13 (or the minimum age in your country).

Security

We use encryption in transit (HTTPS), hashed passwords, and access controls. No system is perfectly secure, so please use a strong, unique password.

Changes and contact

We'll post updates here and tell you about significant changes. Questions: support@grabitor.com.